Privacy Policy

Last updated: April 1, 2026 | Effective: April 1, 2026

This Privacy Policy describes how COOKIE & COMPANY, LLC ("we," "our," or "us"), operating Iquo Cookhouse at iquodrive.com ("Site"), collects, uses, stores, and protects your personal information. By using our Site you agree to the terms of this policy.

1. Information We Collect

Information You Provide Directly

Account registration data: full name, email address, password (stored as a one-way bcrypt hash).
Subscription data: chosen plan (monthly or annual), subscription start date.
Payment data: cardholder name, card number (last 4 digits retained only), expiry date, billing address. Full card data is used only for transaction processing and is never stored in full on our servers.
Contact form submissions: name, email, message content, selected topic.
Newsletter subscriptions: email address.

Information Collected Automatically

Usage analytics: pages visited, time on page, referring URL, browser type, operating system, approximate geographic location (country/city level).
Cookies and tracking technologies: session cookies (essential for login), preference cookies, and advertising cookies (see Section 5 below for Microsoft UET disclosure).
IP address: logged for security and fraud prevention purposes.

2. Microsoft Advertising UET Tag

This Site uses the Microsoft Advertising Universal Event Tracking (UET) tag. The UET tag collects data about your visits to our Site, including pages visited and actions taken (such as subscription sign-ups), and reports this information to Microsoft Advertising. This data is used to measure the effectiveness of our advertising campaigns and to serve you relevant advertisements on Microsoft properties.

The UET tag may set cookies on your device. To opt out of Microsoft Advertising interest-based advertising, visit: account.microsoft.com/privacy. You may also opt out via the Digital Advertising Alliance at optout.aboutads.info.

3. How We Use Your Information

To create and manage your account.
To process subscription payments and physical product orders.
To send transactional emails (order confirmations, receipts, password resets).
To send marketing communications (weekly recipe newsletters) if you have subscribed. You may unsubscribe at any time via the link in any email.
To respond to customer support enquiries.
To improve the Site and personalise your experience.
To detect and prevent fraud and unauthorised access.
To comply with legal obligations.

4. How We Share Your Information

We do not sell your personal information to third parties. We may share data with:

Payment processors: to process card payments securely.
Email service providers: to send transactional and marketing emails.
Analytics providers: to understand Site usage (data is aggregated and anonymised where possible).
Advertising partners (Microsoft Advertising): as described in Section 2.
Legal authorities: if required by law, court order, or to protect our legal rights.
Business transfers: in the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

5. Cookies

We use cookies and similar technologies. For full details see our Cookie Policy. You can manage your cookie preferences via the cookie notice banner on your first visit, or at any time via your browser settings.

6. Data Security

We implement industry-standard security measures including HTTPS encryption in transit, bcrypt password hashing, and restricted access to personal data. No transmission over the internet is completely secure, and we cannot guarantee absolute security.

7. Data Retention

Account data: retained for 3 years after your last login, then permanently deleted.
Payment records: retained for 7 years as required by applicable tax and financial regulations.
Contact form submissions: retained for 2 years.
Newsletter list: retained until you unsubscribe or request deletion.

8. Your Rights -- California Residents (CCPA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act:

Right to Know: you may request a summary of the personal information we have collected about you in the past 12 months.
Right to Delete: you may request deletion of your personal information, subject to certain exceptions.
Right to Opt Out of Sale: we do not sell personal information, but you may still submit an opt-out request.
Right to Non-Discrimination: we will not discriminate against you for exercising your CCPA rights.

To exercise these rights, email us at info@iquodrive.com with the subject "CCPA Request."

9. Your Rights -- EU/UK Residents (GDPR)

If you are located in the European Economic Area or United Kingdom, you have rights under the General Data Protection Regulation including:

Right of access to your personal data.
Right to rectification of inaccurate data.
Right to erasure ("right to be forgotten").
Right to restriction of processing.
Right to data portability.
Right to object to processing based on legitimate interests.

Our lawful basis for processing is: contract performance (subscriptions and orders), legitimate interests (security, fraud prevention, analytics), and consent (marketing communications). To exercise any GDPR right, email info@iquodrive.com.

10. Children's Privacy

Our Site is not directed to children under 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected data from a child, please contact us immediately.

11. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email to registered users and via a notice on the Site. Continued use of the Site after changes take effect constitutes your acceptance of the revised policy.

12. Contact Us

For privacy-related enquiries, to exercise your rights, or to request data deletion, contact:

COOKIE & COMPANY, LLC
5325 Napa Drive, Sarasota, FL 34243, United States
Email: info@iquodrive.com